Sigma Watch is free and independent. If it saves you time, keep it running. ☕ Buy me a coffee
SigmaWatch
Detection engineering shortlist

Coverage gaps

CVEs with no matching rule yet across Sigma, Elastic, Splunk ESCU, YARA, Microsoft Sentinel, Snort, or Suricata. Filter to KEV-listed entries to see vulnerabilities under confirmed active exploitation that still have no public detection.

15054 matching CVEs.

CVESeverityStatusPublishedKEV added
CVE-2026-93952 CVSS 10.0 Actively exploited (KEV) 2026-09-22 2026-09-22
CVE-2026-76460 CVSS 10.0 Actively exploited (KEV) 2026-09-16 2026-09-16
CVE-2026-85706 CVSS 10.0 Actively exploited (KEV) 2026-09-12 2026-09-11
CVE-2026-75650 CVSS 10.0 Actively exploited (KEV) 2026-09-07 2026-09-08
CVE-2026-5430 CVSS 10.0 Actively exploited (KEV) 2026-08-06 2026-09-24
CVE-2026-20079 CVSS 10.0 Actively exploited (KEV) 2026-03-04 2026-09-09
CVE-2026-84869 CVSS 9.9 Actively exploited (KEV) 2026-09-08 2026-09-11
CVE-2026-104286 CVSS 9.8 Actively exploited (KEV) 2026-10-01 2026-10-01
CVE-2026-102490 CVSS 9.8 Actively exploited (KEV) 2026-09-30 2026-10-02
CVE-2026-102489 CVSS 9.8 Actively exploited (KEV) 2026-09-30 2026-10-02
CVE-2026-76504 CVSS 9.8 Actively exploited (KEV) 2026-09-30 2026-09-30
CVE-2026-94127 CVSS 9.8 Actively exploited (KEV) 2026-09-22 2026-09-22
CVE-2026-93616 CVSS 9.8 Actively exploited (KEV) 2026-09-22 2026-09-22
CVE-2026-76461 CVSS 9.8 Actively exploited (KEV) 2026-09-14 2026-09-14
CVE-2026-85102 CVSS 9.8 Actively exploited (KEV) 2026-09-09 2026-09-22
CVE-2026-86218 CVSS 9.8 Actively exploited (KEV) 2026-09-06 2026-09-08
CVE-2026-86060 CVSS 9.8 Actively exploited (KEV) 2026-09-05 2026-09-10
CVE-2026-19490 CVSS 9.8 Actively exploited (KEV) 2026-08-19 2026-09-09
CVE-2025-39682 CVSS 9.8 Actively exploited (KEV) 2025-09-05 2026-09-18
CVE-2026-71362 CVSS 9.1 Actively exploited (KEV) 2026-08-11 2026-09-24
CVE-2026-86950 CVSS 8.8 Actively exploited (KEV) 2026-09-28 2026-09-29
CVE-2026-58704 CVSS 8.8 Actively exploited (KEV) 2026-09-15 2026-09-16
CVE-2026-87491 CVSS 8.8 Actively exploited (KEV) 2026-09-09 2026-09-09
CVE-2026-85046 CVSS 8.8 Actively exploited (KEV) 2026-09-03 2026-09-04
CVE-2026-65660 CVSS 8.8 Actively exploited (KEV) 2026-08-11 2026-09-25
CVE-2026-53266 CVSS 8.8 Actively exploited (KEV) 2026-06-25 2026-09-18
CVE-2026-7273 CVSS 8.8 Actively exploited (KEV) 2026-06-16 2026-09-21
CVE-2026-67277 CVSS 8.2 Actively exploited (KEV) 2026-09-05 2026-09-10
CVE-2026-88772 CVSS 8.1 Actively exploited (KEV) 2026-09-27 2026-09-27
CVE-2026-87902 CVSS 8.1 Actively exploited (KEV) 2026-09-22 2026-09-25
CVE-2026-42016 CVSS 8.1 Actively exploited (KEV) 2026-07-27 2026-09-11
CVE-2025-25249 CVSS 8.1 Actively exploited (KEV) 2026-01-13 2026-09-09
CVE-2026-87886 CVSS 7.8 Actively exploited (KEV) 2026-09-17 2026-09-16
CVE-2026-85880 CVSS 7.8 Actively exploited (KEV) 2026-09-08 2026-09-08
CVE-2026-81963 CVSS 7.8 Actively exploited (KEV) 2026-09-08 2026-09-08
CVE-2025-39964 CVSS 7.8 Actively exploited (KEV) 2025-10-13 2026-09-18
CVE-2026-42018 CVSS 7.5 Actively exploited (KEV) 2026-08-12 2026-09-11
CVE-2026-67279 CVSS 6.5 Actively exploited (KEV) 2026-09-05 2026-09-25
CVE-2026-103956 CVSS 10.0 2026-10-02 —
CVE-2026-104610 CVSS 10.0 2026-10-02 —